Gunter Van de Velde has entered the following ballot position for draft-ietf-anima-jws-voucher-13: No Objection
When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) Please refer to https://www.ietf.org/about/groups/iesg/statements/handling-ballot-positions/ for more information about how to handle DISCUSS and COMMENT positions. The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/draft-ietf-anima-jws-voucher/ ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- # Gunter Van de Velde, RTG AD, comments for draft-ietf-anima-jws-voucher-13 # Many thanks for this document # line numbers are derived with the idnits tool https://author-tools.ietf.org/api/idnits?url=https://www.ietf.org/archive/id/draft-ietf-anima-jws-voucher-13.txt # I do not have significant crypto knowledge, hence my review is rather high level from generalist and readability perspective. I found the draft well written. #DETAILED COMMENTS #================= 123 Voucher: A short form for voucher artifact and refers to the signed 124 statement from Manufacturer Authorized Signing Authority (MASA) 125 service that indicates to a Pledge the cryptographic identity of 126 the domain it should trust, per [I-D.ietf-anima-rfc8366bis]. GV> I saw the term 'artifact' few times used before this section. Is this a term that is well known in the context of anima/security? Maybe suggest a definition or description what is intended. I did a search on the web and found the following short summary: "In the context of JWS, an artifact typically refers to the payload or data that is being signed and transmitted. This artifact is encoded as part of the JWS structure and, along with the signature, ensures the integrity and authenticity of the data." _______________________________________________ Anima mailing list -- anima@ietf.org To unsubscribe send an email to anima-le...@ietf.org
