IESG commet on draft-ietf-trade-iotp-v1.0-papi-05

Eastlake III Donald-LDE008 <Donald.Eastlake@motorola.com> Tue, 16 March 2004 05:07 UTC

Return-Path: <ietf-trade-errors@lists.elistx.com>
Received: from FILTER-ELIST-DAEMON.elistx.com by elistx.com (PMDF V6.0-025 #44856) id <0HUN00002KVWX0@elistx.com> (original mail from Donald.Eastlake@motorola.com); Tue, 16 Mar 2004 00:07:08 -0500 (EST)
Received: from DIRECTORY-DAEMON.elistx.com by elistx.com (PMDF V6.0-025 #44856) id <0HUN00001KVVWZ@elistx.com> for ietf-trade@lists.elistx.com; Tue, 16 Mar 2004 00:07:07 -0500 (EST)
Received: from motgate8.mot.com (motgate8.mot.com [129.188.136.8]) by elistx.com (PMDF V6.0-025 #44856) with ESMTP id <0HUN0003FKVM1Y@elistx.com> for ietf-trade@lists.elistx.com; Tue, 16 Mar 2004 00:07:07 -0500 (EST)
Received: from il06exr03.mot.com (il06exr03.mot.com [129.188.137.133]) by motgate8.mot.com (Motorola/Motgate3) with ESMTP id i2G56xcP017021 for <ietf-trade@lists.eListX.com>; Mon, 15 Mar 2004 22:06:59 -0700 (MST)
Received: from ma19exm01.e6.bcs.mot.com (ma19exm01.e6.bcs.mot.com [10.14.33.5]) by il06exr03.mot.com (Motorola/il06exr03) with ESMTP id i2G56sCn024960 for <ietf-trade@lists.eListX.com>; Mon, 15 Mar 2004 23:06:54 -0600
Received: by ma19exm01.e6.bcs.mot.com with Internet Mail Service (5.5.2657.2) id <F561XQZB>; Tue, 16 Mar 2004 00:06:53 -0500
Content-return: allowed
Date: Tue, 16 Mar 2004 00:06:53 -0500
From: Eastlake III Donald-LDE008 <Donald.Eastlake@motorola.com>
Subject: IESG commet on draft-ietf-trade-iotp-v1.0-papi-05
To: ietf-trade@lists.elistx.com
Message-id: <62173B970AE0A044AED8723C3BCF23810408B323@ma19exm01.e6.bcs.mot.com>
MIME-version: 1.0
X-Mailer: Internet Mail Service (5.5.2657.2)
Content-type: text/plain
List-Owner: <mailto:ietf-trade-help@lists.elistx.com>
List-Post: <mailto:ietf-trade@lists.elistx.com>
List-Subscribe: <http://lists.elistx.com/subscribe>, <mailto:ietf-trade-request@lists.elistx.com?body=subscribe>
List-Unsubscribe: <http://lists.elistx.com/unsubscribe>, <mailto:ietf-trade-request@lists.elistx.com?body=unsubscribe>
List-Archive: <http://lists.elistx.com/archives/ietf-trade/>
List-Help: <http://lists.elistx.com/elists/admin.shtml>, <mailto:ietf-trade-request@lists.elistx.com?body=help>
List-Id: <ietf-trade.lists.elistx.com>

The IESG has provided the following comment on
	draft-ietf-trade-iotp-v1.0-papi-05

"The use of MerchantData makes me nervous.  The level of abstraction makes
it difficult to tell, but I think that MerchantData can contain plaintext
cryptographic keys, which would be very poor design."

We need to respond to this comment.

Thanks,
Donald
===========================================================
 Donald E. Eastlake III       Donald.Eastlake@Motorola.com
 Motorola Laboratories               1-508-786-7554 (work)
 111 Locke Drive                     1-508-634-2066 (home)
 Marlboro, MA 01752 USA