I have reviewed this document as part of the security directorate's 
ongoing effort to review all IETF documents being processed by the 
IESG.  These comments were written primarily for the benefit of the 
security area directors.  Document editors and WG chairs should treat 
these comments just like any other last call comments.


This document specifies how the PASSport framework (RFC 8225)can be used to
provide message integrity protection of text and multimedia messages 
by defining a new PASSPort type, e.g. JWT claim "msgi".

The draft seems straightforward, though personally I find naming the JWT 
and PASSport types "msgi" and "msg" respectively to be a little 
confusing/misleading as the claim is for "msg-integrity" perhaps
that is the suffix 'I'.  But that is a personal bias so assuming the working
group has accepted the nomenclature, you can leave the labels as such.

I found no issues with the draft except for one typo:
Section 3.2 last paragraph "mesages" should be "messages"