[Drip] Roman Danyliw's No Objection on draft-ietf-drip-auth-47: (with COMMENT)

[Roman Danyliw via Datatracker <[e-mail]>]

Roman Danyliw has entered the following ballot position for
draft-ietf-drip-auth-47: No Objection

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/ 
for more information about how to handle DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-drip-auth/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

(This is a revised ballot initially entered on -46 in preparation for the
Feb-01-2024 telechat)

Thank you to Rich Salz for the early SECDIR review.

I lacked access to [F3411] which is a critical normative reference for this
document.  In particular, I am unable to evaluate Section 4.3.2.

Thank you for addressing my DISCUSS feedback on -46 and most of my COMMENTs.

** Section 4.2.
   A hash of the final link (BE: HDA on UA) in the Broadcast Endorsement
   chain MUST be included in each DRIP Manifest Section 4.4.

[per -46] It would have been helpful to provide more prose on computing and
using a “Broadcast Endorsement chain”.

[per -47] Thanks for the explanation on endorsement chains being related to
content in [drip-registries].  See below.

** [per -46] Section 11.1.  I believe that [drip-registries] needs to be a
normative reference given the importance of this reference for Section 4.1 and
9.2