Re: [stir] Second WGLC: draft-ietf-stir-passport-rcd-10

[Russ Housley <[e-mail]>]

I have reviewed the document.  It is in good shape, but I have a few comments.


TECHNICAL:

What happens if the JWTClaimConstraints in the certificate explicitly excludes the "rcdi" claim?


EDITORIAL:

Section 4, 2nd para, says: "... defined to accomplish that ...".  Given the many things discussed in the previous paragraph, please replace "that" with a few words to add clarity.

Section 5.1.2, end of 1st para, says: 'The "jcd" and "jcl" keys should be mutually exclusive.'  Please use a MUST or MUST NOT statement here.

Section 5.1.3, end of 1st para, says: 'The "jcd" and "jcl" keys MUST be used mutually exclusively.'  I suggest: 'The "jcd" and "jcl" claim keys are mutually exclusive; the "jcd" and "jcl" claim keys MUST NOT both be present in the same PASSport.'


NITS:

Section 3:
   s/set of info/information/
   s/extensions to that data./extensions./
   s/on a more frequent, per call, type of basis/with each call/

Section 4:
   s/sufficiently strong cryptographic digest/message digest/

Section 5.2:
   s/crypto algorithm/cryptographic one-way hash function/
   s/by the NIST/by the NIST [FIPS180-4]/


Russ