[stir] Alexey Melnikov's Discuss on draft-ietf-stir-certificates-11: (with DISCUSS and COMMENT)

["Alexey Melnikov" <[e-mail]>]

Alexey Melnikov has entered the following ballot position for
draft-ietf-stir-certificates-11: Discuss

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-stir-certificates/



----------------------------------------------------------------------
DISCUSS:
----------------------------------------------------------------------

I have one small issue that I would like to discuss before recommending
approval of this document:

Reading Section 8 I was unable to figure out what are "claim",
"permitted" and "excluded" and what exact syntaxes they use. I think this
is underspecified.
You are probably missing some references, examples or both.


----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

URI (RFC 3986), HTTP (RFC 7230) and HTTPS (RFC 2818) need to be Normative
References.