[sidr] Kathleen Moriarty's No Objection on draft-ietf-sidr-rpki-rtr-rfc6810-bis-08: (with COMMENT)

["Kathleen Moriarty" <[e-mail]>]

Kathleen Moriarty has entered the following ballot position for
draft-ietf-sidr-rpki-rtr-rfc6810-bis-08: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-sidr-rpki-rtr-rfc6810-bis/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

Thanks for your work on this draft.  The first question is more of a nit,
the second is more important.

Section 9.1
I suggest saying man-in-the-middle instead of monkey-in-the-middle as we
use the latter typically in documents and I don't think there's anything
particularly unique to a monkey-in-the-middle attack, but correct me if I
am wrong.  I think it's just an alternate name for man-in-the-middle as
result of Dug Song's tool sniff on monkey.org.  If monkey-in-the-middle
is important for some reason, could you include a reference?

Section 9.3
Why isn't MD5 deprecated or discouraged more in this section?