Re: [TLS] Opsdir last call review of draft-ietf-tls-oldversions-deprecate-09

[Kathleen Moriarty <[e-mail]>]

Thank you for your review, Nagendra and finding several nits.  We'll
correct them.

Best regards,
Kathleen

On Mon, Nov 30, 2020 at 4:21 PM Nagendra Nainar via Datatracker <
[e-mail]> wrote:

> Reviewer: Nagendra Nainar
> Review result: Ready
>
> Hi,
>
> I have reviewed this document as part of the Operational directorate's
> ongoing
> effort to review all IETF documents being processed by the IESG.  These
> comments were written with the intent of improving the operational aspects
> of
> the IETF drafts per guidelines in RFC5706.
>
> Comments that are not addressed in last call may be included
> in AD reviews during the IESG review.  Document editors and WG chairs
> should
> treat these comments just like any other last call comments.
>
> Version: draft-ietf-tls-oldversions-deprecate-09
>
> Overall Summary:
>
> This draft is deprecating TLS v1.0 and TLSv1.1 to reduce the opportunity
> for
> misconfiguration or security attack.
>
> The draft clarifies that these (to be obsoleted) versions of TLS must not
> be
> negotiated and further clarifies that the connection must be terminated
> upon
> receiving such version in the initial negotiation.
>
> Overall this is a well-written document with clear clarification on any
> backward compatibility requirement.
>
> I just noticed a couple of nits some of which were already mentioned in
> other
> reviews as well. I am including the same here for completeness:
>
> 1. s/waas defined/was defined
> 2. Some text appears to use DTLS while other use (D)TLS. I think it is
> better
> to use one common way of defining it.
>
> Thanks,
> Nagendra
>
>
>

-- 

Best regards,
Kathleen