Paul Wouters has entered the following ballot position for draft-ietf-cose-countersign-10: Yes
When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/ for more information about how to handle DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-cose-countersign/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- Thanks for addressing my DISCUSS. I updated my ballot to YES. Old DISCUSS: gem install cbor-diag I am concerned about adding install commands for "programs from the internet" within an RFC. If the rubygem for some reason becomes malicious, we cannot pull it from the RFC (even if we pull it from the datatracker link, it would still live on in copies of the RFC elsewhere and malicious people could point to copies of those original RFCs to point people to downlod the malicious rubygem. I would be okay with an iet.org download location of a ruby gem. NITS: CBOR grammar in this document is uses Remove "is" to deal with > as an entity This is a render error for '>' ? they apply these apply Languages: There are three different languages that are currently supported: Java and C#. That's two not three? Text below suggests there might be a 3rd one in C ? _______________________________________________ COSE mailing list [email protected] https://www.ietf.org/mailman/listinfo/cose
