Last Call Review of draft-ietf-httpbis-http2-16
review-ietf-httpbis-http2-16-secdir-lc-lonvick-2015-01-22-00
| Request | Review of | draft-ietf-httpbis-http2 |
|---|---|---|
| Requested revision | No specific revision (document currently at 17) | |
| Type | IETF Last Call Review | |
| Team | Security Area Directorate (secdir) | |
| Deadline | 2015-01-20 | |
| Requested | 2015-01-02 | |
| Authors | Mike Belshe , Roberto Peon , Martin Thomson | |
| I-D last updated | 2020-01-21 (Latest revision 2015-02-10) | |
| Completed reviews |
Genart IETF Last Call review of -16
by Elwyn B. Davies
(diff)
Genart IETF Last Call review of -16 by Elwyn B. Davies (diff) Secdir IETF Last Call review of -16 by Chris M. Lonvick (diff) |
|
| Assignment | Reviewer | Chris M. Lonvick |
| State | Completed | |
| Request | IETF Last Call review on draft-ietf-httpbis-http2 by Security Area Directorate Assigned | |
| Reviewed revision | 16 (document currently at 17) | |
| Result | Ready | |
| Completed | 2015-01-22 |
review-ietf-httpbis-http2-16-secdir-lc-lonvick-2015-01-22-00
Hi,
I have reviewed this document as part of the security
directorate's ongoing effort to review all IETF documents being
processed by the IESG. These comments were written primarily for
the benefit of the security area directors. Document editors and
WG chairs should treat these comments just like any other last
call comments.
I only had time to skim through the document but overall,
the document is well written and appears to appropriately address
the security concerns. I suggest that the document is READY for
publication.
Just as a "ni" (it's less than a "nit" ;-), should the list
of prohibited cipher suites become an IANA registry? Doing so
would make it easier to authoritatively add to it, and others may
be interested in referencing the list.
Best regards,
Chris