I've now done my AD review for draft-ietf-sasl-gs2-17. Basically,
it looks good, so I've asked the secretariat to start IETF Last Call.
I do have couple of minor comments that can be considered as the
first last call comments:
- I have two questions about Section 8. First, if the GS2 mechanism
doesn't e.g. support confidentiality, wouldn't setting conf_req_flag
cause things to fail? (so it's not really "irrelevant")
- Second, should Section 8 say something about the flags that are not
related to per-message tokens? (deleg, mutual, anon)
- Section 4 should say either that character case (for things like
"p=" and "a=") must be exactly as shown here, or that they're case
insensitive (if nothing is said, RFC 5234 strings are by default case
insensitive, I think).
- In Section 5, I would suggest adding parenthesis to the "gs2-cb-flag"
('gs2-cbind-flag = ("p=" cb-name) / "n" / "y"') to make it easier
to parse for the reader..
Best regards,
Pasi
Note Well: Messages sent to this mailing list are the opinions of the senders and do not imply endorsement by the IETF.