[Unbearable] Genart last call review of draft-ietf-tokbind-protocol-16

Jouni Korhonen <jouni.nospam@gmail.com> Fri, 01 December 2017 06:56 UTC

Return-Path: <jouni.nospam@gmail.com>
X-Original-To: unbearable@ietf.org
Delivered-To: unbearable@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 93DBD127863; Thu, 30 Nov 2017 22:56:19 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: Jouni Korhonen <jouni.nospam@gmail.com>
To: gen-art@ietf.org
Cc: draft-ietf-tokbind-protocol.all@ietf.org, unbearable@ietf.org, ietf@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.66.0
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <151211137956.11945.3926284036867947678@ietfa.amsl.com>
Date: Thu, 30 Nov 2017 22:56:19 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/unbearable/ZU9EPIuADzJCa8mc6WWzpSH9Zic>
Subject: [Unbearable] Genart last call review of draft-ietf-tokbind-protocol-16
X-BeenThere: unbearable@ietf.org
X-Mailman-Version: 2.1.22
List-Id: "\"This list is for discussion of proposals for doing better than bearer tokens \(e.g. HTTP cookies, OAuth tokens etc.\) for web applications. The specific goal is chartering a WG focused on preventing security token export and replay attacks.\"" <unbearable.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/unbearable>, <mailto:unbearable-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/unbearable/>
List-Post: <mailto:unbearable@ietf.org>
List-Help: <mailto:unbearable-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/unbearable>, <mailto:unbearable-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 01 Dec 2017 06:56:20 -0000

Reviewer: Jouni Korhonen
Review result: Ready

I am the assigned Gen-ART reviewer for this draft. The General Area
Review Team (Gen-ART) reviews all IETF documents being processed
by the IESG for the IETF Chair.  Please treat these comments just
like any other last call comments.

For more information, please see the FAQ at


Document: draft-ietf-tokbind-protocol-??
Reviewer: Jouni Korhonen
Review Date: 2017-11-30
IETF LC End Date: 2017-11-27
IESG Telechat date: Not scheduled for a telechat

Summary: Ready to go. I am not an expert on this field thus my review was
rather superficial. Reading the document through did not raise any alarms.

Major issues: None spotted.

Minor issues: None.

Nits/editorial comments:  IDnist result was good (outdated references are