Telechat Review of draft-ietf-httpapi-api-catalog-06
review-ietf-httpapi-api-catalog-06-secdir-telechat-salazar-2024-12-04-00

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG.  These comments were written primarily for the benefit of the
security area directors.  Document editors and WG chairs should treat
these comments just like any other last call comments.

Please note that I previously reviewed version 05 of this draft and at that
time stated that the document was "Ready with Issues".

I am therefore only reviewing the differences between version 05 and current
version (06) and, due to time constrains for the upcoming Telechat, only
those differences pertaining to my previous review.

The summary of the review is: Ready

Major Concerns: None
The major concern highlighted in the previous review has been addressed with
the text added to the Security Considerations in section 8. The new text covers
the cases mentioned in my previous review and recommended references.

Minor Concerns: None

Nits:

All nits have been addressed except the double spacing between the end of a
sentence and the beginning of the next sentence in the same paragraph, which
can be interpreted as a styling choice. No new nits to remark on.

Thank you for the quick update and incorporation of feedback.