Telechat Review of draft-ietf-ipsecme-split-dns-16
review-ietf-ipsecme-split-dns-16-opsdir-telechat-chown-2019-02-03-00

Hi,

I have reviewed this document as part of the Operational directorate's ongoing
effort to review all IETF documents being processed by the IESG.  These
comments were written with the intent of improving the operational aspects of
the IETF drafts. Comments that are not addressed in last call may be included
in AD reviews during the IESG review.  Document editors and WG chairs should
treat these comments just like any other last call comments.

This draft defines new configuration options in support of IKEv2 in split DNS
scenarios, by adding two new Configuration Payload Attribute Types, namely
INTERNAL_DNS_DOMAIN and INTERNAL_DNSSEC_TA, which provide the
necessary support for private (internal-only) DNS domains.

I had previously reviewed the -12 version of the document, for which I only had
one significant comment (a mis-match of SHOULD and MUST in two of the
sections of the document).  This has been addressed in the current -16 version
(to both be MUST), so I now believe the document to be Ready for publication.

The previous review can be found at
https://datatracker.ietf.org/doc/review-ietf-ipsecme-split-dns-12-opsdir-lc-chown-2018-08-30/