Last Call Review of draft-ietf-jmap-core-12
review-ietf-jmap-core-12-tsvart-lc-mankin-2018-12-28-00

This document has been reviewed as part of the transport area review team's
ongoing effort to review key IETF documents. These comments were written
primarily for the transport area directors, but are copied to the document's
authors and WG to allow them to address any issues raised and also to the IETF
discussion list for information.

When done at the time of IETF Last Call, the authors should consider this
review as part of the last-call comments they receive. Please always CC
tsv-art@ietf.org if you reply to or forward this review.

This standards track specification is in good shape from a transport point of
view. Topics considered in this assessment were its discovery mechanism, its
support of tools for denial of service and rate control issues on both the
server and clients side, its ordering and data flow for the allowed disparate
client endpoints, and its transport mapping, which is mandatory HTTPS.

One question that is referred to other areas is what recommendations would be
given (or what spec referenced) for validation of uploaded blob objects (it
looks like the flow control for these is fine).