[secdir] Secdir review of draft-ietf-httpbis-authscheme-registrations-08

[Catherine Meadows <[e-mail]>]

I have reviewed this document as part of the security directorate's 
ongoing effort to review all IETF documents being processed by the 
IESG.  These comments were written primarily for the benefit of the 
security area directors.  Document editors and WG chairs should treat 
these comments just like any other last call comments.


This document registers Hypertext Transfer Protocol (HTTP) authentication schemes which have been defined in standards=tract
RCFs before the IANA HTTP Authentication Scheme Registry was established.

My understanding is that registration does not constitute an endorsement of security; it simply allows IANA do make sure that any
identifiers, etc. specified remain unique.  Thus I do not see any security issues with this document.




Catherine Meadows
Naval Research Laboratory
Code 5543
4555 Overlook Ave., S.W.
Washington DC, 20375
phone: [phone]
fax: [phone]
email: [e-mail]