Thanks Roni! See my replies below.
Regards, Rifaat On Tue, Oct 22, 2019 at 4:38 AM Roni Even via Datatracker <[email protected]> wrote: > Reviewer: Roni Even > Review result: Almost Ready > > I am the assigned Gen-ART reviewer for this draft. The General Area > Review Team (Gen-ART) reviews all IETF documents being processed > by the IESG for the IETF Chair. Please wait for direction from your > document shepherd or AD before posting a new version of the draft. > > For more information, please see the FAQ at > > <https://trac.ietf.org/trac/gen/wiki/GenArtfaq>. > > Document: draft-ietf-sipcore-digest-scheme-?? > Reviewer: Roni Even > Review Date: 2019-10-22 > IETF LC End Date: None > IESG Telechat date: 2019-10-31 > > Summary: > The document is almost ready for publication as a standard track RFC > > Major issues: > > Minor issues: > > 1. In section 2.4 " If the UAC cannot respond to any of the challenges in > the > response, then it SHOULD abandon attempts to send the request, e.g. if the > UAC > does not have credentials or has stale credentials for any of the > realms, > unless a local policy dictates otherwise." Yet RFC3261 section 22.2 " > If no > credentials for a realm can be located, UACs MAY attempt to retry the > request with a username of "anonymous" and no password (a password of > ""). > Is this deprecated ? > > No, it is not deprecated by this document, and that part is covered by the last sentence of the quoted paragraph, which talks about a local policy. > 2. RFC3261 algorithm includes "MD5-sess" while section 2.6 removed it > These changes are provided in the context of RFC7616, so if an implementation supports "-sess" it could always refer to that document for these details. > 3. it may be good to have a backward compatibility section. > > I believe we covered that in the security consideration section. Do you see anything missing there? Regards, Rifaat > Nits/editorial comments: > > >
_______________________________________________ Gen-art mailing list [email protected] https://www.ietf.org/mailman/listinfo/gen-art
