Re: [stir] WG Last Call comments on stir-oob-04

[Chris Wendt <[e-mail]>]

My review of oob document, mostly comments/suggestions/questions.  No major issues since this is a proposed framework vs. protocol specifications.

Abstract - you mentioned other use cases besides non-VoIP protocol, for enterprise scenarios, Should you include brief reference to that style of use-case in abstract?

Introduction - same comment as abstract, it’s very focused on PSTN endpoint bridging, where it might benefit from some other use cases

Section 3 - similar comment, maybe an example of caller (or telephone network) to GW to local specialized network to GW to callee (or telephone network)

Section 4 - is it necessary to describe the two data flow architectures? 

Section 5.5 - this seems like a really specific example, not saying its an invalid example, but just thinking that maybe there is simpler examples to include as well, like a more general thing like enterprise equipment doesn’t support identity headers, enterprise ingress SBC sends passport to CPS, and endpoint has the ability to retrieve the passport when call arrives. for example.

Section 6  - first paragraph "However, as use cases 3 and 4 in Section 5 show” - use case 5 also shows this now

For the rest of the document, I didn’t find any obvious logical issues, obviously this is defining rough details of a potential framework, so nits on interfaces or other details is probably not necessary.

I do agree with other comments that a more explicit note in abstract and/or introduction that this is a proposed framework of architectural elements that are focused on solving the security of issues that are unique to oob stir would be appropriate.

-Chris