Last Call Review of draft-atarius-dispatch-meid-urn-13
review-atarius-dispatch-meid-urn-13-opsdir-lc-chown-2017-12-08-00

Request Review of draft-atarius-dispatch-meid-urn
Requested rev. no specific revision (document currently at 17)
Type Last Call Review
Team Ops Directorate (opsdir)
Deadline 2017-12-08
Requested 2017-11-02
Other Reviews Genart Last Call review of -13 by Roni Even (diff)
Genart Telechat review of -14 by Roni Even (diff)
Review State Completed
Reviewer Tim Chown
Review review-atarius-dispatch-meid-urn-13-opsdir-lc-chown-2017-12-08
Posted at https://mailarchive.ietf.org/arch/msg/ops-dir/fyd8LfysjpO32uyy_nGQKkmSaa8
Reviewed rev. 13 (document currently at 17)
Review result Ready
Draft last updated 2017-12-08
Review completed: 2017-12-08

Review
review-atarius-dispatch-meid-urn-13-opsdir-lc-chown-2017-12-08

Hi,

I have reviewed this document as part of the Operational directorate’s ongoing effort to review all IETF documents being processed by the IESG.  These comments were written with the intent of improving the operational aspects of the IETF drafts. Comments that are not addressed in last call may be included in AD reviews during the IESG review. Document editors and WG chairs should treat these comments just like any other last call comments.

This document describes a Uniform Resource Name (URN) namespace for the Third Generation Partnership Project (3GPP2) and a Namespace Specific String (NSS) for the Mobile Equipment Identity (MEID).  Devices supporting only 3GPP2  have a requirement to be able to use an MEID as a URN.  This document presents the MEID, describing its format, and includes recommendations on privacy requirements when MEIDs are transmitted, and that MEIDs not be used for authorisation purposes or as personal identifiers.

Review result: Ready with Nits

This document is well-written and clear to follow.   

Nits:

The figure on page 7 should perhaps extend the bottom line with an extra --+ to clearly indicate that only the first 4 bits of the 8th octet are used for the check digit. 

Section 8: "provider's customer" should be "providers' customer"
It is good to see discussion of privacy and security issues here. Perhaps state that as a general privacy principle, only the minimal information required should be transmitted in any protocol.  RFC7258 could be mentioned; though the scope over which MEIDs may be transmitted is not wholly clear.

Tim