In 5.3, I suggest changing the text from "Keys that are in other formats can be 
represented as COSE Keys.  Any party in possession of COSE Keys can use the 
COSE Key Thumbprint." to "Keys that are in other formats can be represented as 
COSE Keys.  Any party in possession of those keys can create their 
corresponding COSE Key representations and use the COSE Key Thumbprint."

                                -- Mike

-----Original Message-----
From: Deb Cooley via Datatracker <[email protected]>
Sent: Tuesday, August 6, 2024 3:15 AM
To: The IESG <[email protected]>
Cc: [email protected]; [email protected]; 
[email protected]; [email protected]; [email protected]
Subject: Deb Cooley's No Objection on draft-ietf-cose-key-thumbprint-05: (with 
COMMENT)

Deb Cooley has entered the following ballot position for
draft-ietf-cose-key-thumbprint-05: No Objection

When responding, please keep the subject line intact and reply to all email 
addresses included in the To and CC lines. (Feel free to cut this introductory 
paragraph, however.)


Please refer to 
https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/
for more information about how to handle DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-cose-key-thumbprint/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

Section 2: If COSE keys are specifically public asymmetric keys and/or
symmetric keys, you could mention that here.  It becomes partially apparent
throughout the reading of the draft, but it would be nice if it was up front.

Section 5.3: The second sentence is trivially true.  The question is whether a
different kind of key can use the thumbprint algorithm.  Perhaps the second
should say, 'Any party in possession of a key that is represented as a COSE
Keys can use...'

Section 5.6, para 4?, last sentence:   For error handling:  It seems like there
should be a MUST or at least a SHOULD instead of the current 'will need to'.



_______________________________________________
COSE mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to