Early Review of draft-ietf-cdni-https-delegation-subcerts-06
review-ietf-cdni-https-delegation-subcerts-04-secdir-early-ounsworth-2023-09-06-02

Request Review of draft-ietf-cdni-https-delegation-subcerts-04
Requested revision 04 (document currently at 12)
Type Early Review
Team Security Area Directorate (secdir)
Deadline 2023-09-08
Requested 2023-08-19
Requested by Kevin J. Ma
Authors Frédéric Fieau , Emile Stephan , Guillaume Bichot , Christoph Neumann
I-D last updated 2024-10-31 (Latest revision 2024-09-05)
Completed reviews Genart IETF Last Call review of -08 by Mallory Knodel (diff)
Secdir Early review of -06 by Mike Ounsworth (diff)
Opsdir IETF Last Call review of -09 by Jouni Korhonen (diff)
Comments 
This draft registers a new CDNI Metadata object for configuring RFC9345 delegated credentials between CDNs.  The configuration object itself is straight-forward, but it does contain an optional field for transporting a private key.  There are strong recommendations not to use the optional field, but we would like a secdir opinion on it.  The draft is ready to go to WGLC, but the chairs felt it would be prudent to get a secdir early review, prior to doing the WGLC and sending the writeup to the IESG.  We appreciate any feedback or suggestions.

thanx!

-- The CDNI WG Chairs
Assignment Reviewer Mike Ounsworth
State Completed
Request Early review on draft-ietf-cdni-https-delegation-subcerts by Security Area Directorate Assigned
Posted at https://mailarchive.ietf.org/arch/msg/secdir/50jH7bn0PfWS2z0QpG3Np_dcnxM
Reviewed revision 06 (document currently at 12)
Result Ready
Completed 2024-03-01
review-ietf-cdni-https-delegation-subcerts-04-secdir-early-ounsworth-2023-09-06-02
All security review concerns addressed in -06.