I am the assigned Gen-ART reviewer for this draft. For background on
Gen-ART, please see the FAQ at
<http://wiki.tools.ietf.org/area/gen/trac/wiki/GenArtfaq>.
Please resolve these comments along with any other Last Call comments
you may receive.
Document: draft-schaad-smime-algorithm-attribute-03
Signer Info Algorithm Protection Attribute
Reviewer: Joel M. Halpern
Review Date: 15-Dec-2010
IETF LC End Date: 03-Jan-2011
IESG Telechat date: 20-Jan-2010
Summary: This document is ready for publication as a Proposed Standard
Major issues: N/A
Minor issues: The security consideration section clearly states that
there is no known attack that can use this. To the naive reader, it
seems difficult to conceive of an attack which could downgrade the
algorithm and still have verification proceed correctly. If there is
some cryptographic or mathematical reason to believe that may become
possible, some allusion to that reason would be helpful to the less
informed reader, so as to help make implementors make the right choice
as to whether to add this information.
_______________________________________________
Gen-art mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/gen-art
