Last Call Review of draft-ietf-lamps-ocsp-nonce-update-04
review-ietf-lamps-ocsp-nonce-update-04-artart-lc-fenton-2024-04-01-00

I am the designated ART ART reviewer for draft-ietf-lamps-ocsp-nonce-update-04.

Status: Almost ready

Comments:

Section 1, suggest replacing "[RFC8954] enforce the maximum" to "[RFC8954]
limits the maximum"

Section 2, suggest replacing "enforce" with "limit".

Section 2.1 paragraph 1 can be deleted since this is replacing RFC8954 in its
entirety.

Section 2.1 paragraph 3: "An OCSP client that implements this document SHOULD
use a minimum length of 32 octets..." while RFC 8954 says, "Newer OCSP clients
that support this document MUST use a length of 32 octets..." It seems like
this requirement has been weakened; is there a reason for that? Also in that
paragraph, rather than "in excess of what is permitted by RFC 8954" suggest
saying "in excess of the limit of 32 octets that was specified in RFC 8954."

Section 2.1 paragraph 4: replace "...MUST accept Nonce octets length of at
least 16 octets..." with "...MUST accept Nonce lengths of at least 16 octets..."

Section 2.1 paragraph 5: replace "Nonce octet length" with "Nonce length"

In the example, the object identifier, in addition to Offset and Length, is in
decimal.

I don't have the expertise in ASN.1 to fully review Appendix A; hopefully
another reviewer can check that.

IDNITS points out that you have a normative reference to RFC 5912, which is
informational. I'm not sure the reference is really normative, though.