Monday, November 28, 2011

[Geopriv] Gen-ART review of draft-ietf-geopriv-policy-uri-04

The changes requested in the Gen-ART review of the -03 version have been made in the
-04 version of this draft.

Thanks,
--David

> -----Original Message-----
> From: Black, David
> Sent: Tuesday, November 22, 2011 5:51 PM
> To: rbarnes@bbn.com; martin.thomson@andrew.com; james.winterbottom@andrew.com;
> Hannes.Tschofenig@gmx.net; gen-art@ietf.org
> Cc: Black, David; Robert Sparks; geopriv@ietf.org
> Subject: Gen-ART review of draft-ietf-geopriv-policy-uri-03
>
> I am the assigned Gen-ART reviewer for this draft. For background on Gen-ART,
> please see the FAQ at <http://wiki.tools.ietf.org/area/gen/trac/wiki/GenArtfaq>.
>
> Please wait for direction from your document shepherd
> or AD before posting a new version of the draft.
>
> Document: draft-ietf-geopriv-policy-uri-03
> Reviewer: David L. Black
> Review Date: November 22, 2011
> IESG Telechat date: December 1, 2011
>
> Summary: This draft is basically ready for publication, but has nits that
> should be fixed before publication.
>
> This draft specifies policy URIs for management of privacy policy for location
> information obtained and maintained by Location Configuration Protocols (LCPs).
> The draft is clear and well written.
>
> All of the topics raised by the GenART review of the -02 version are addressed
> in the -03 version, except that an unfortunate sentence structure has neutered
> one of the agreed-to resolutions (PUT and DELETE requests SHOULD always be
> rejected for http: URIs).
>
> The following changes should be made to correctly capture the intent (this is
> a normative change):
>
> Section 7.1:
> OLD
> If other means of protection are available, an "http:" URI MAY be used.
> NEW
> If other means of protection are available, an "http:" URI MAY be used,
> but location servers SHOULD reject all PUT and DELETE requests for policy
> URIs that use the "http:" URI scheme.
> END
>
> Section 7.2:
> OLD
> When neither application-layer or network-
> layer security is provided, location servers MUST reject requests
> using the PUT and DELETE methods, and SHOULD reject PUT and DELETE
> requests for policy URIs that use the "http:" URI scheme.
> NEW
> When neither application-layer or network-
> layer security is provided, location servers MUST reject requests
> using the PUT and DELETE methods.
> END
>
> idnits 2.12.12 did not find anything that needs attention.
>
> Thanks,
> --David
> ----------------------------------------------------
> David L. Black, Distinguished Engineer
> EMC Corporation, 176 South St., Hopkinton, MA  01748
> +1 (508) 293-7953             FAX: +1 (508) 293-7786
> david.black@emc.com        Mobile: +1 (978) 394-7754
> ----------------------------------------------------

_______________________________________________
Geopriv mailing list
Geopriv@ietf.org
https://www.ietf.org/mailman/listinfo/geopriv