Last Call Review of draft-ietf-opsawg-sdi-03
review-ietf-opsawg-sdi-03-opsdir-lc-ersue-2020-02-18-00

Request Review of draft-ietf-opsawg-sdi-02
Requested revision 02 (document currently at 13)
Type Last Call Review
Team Ops Directorate (opsdir)
Deadline 2020-02-18
Requested 2020-02-04
Requested by Joe Clarke
Authors Warren "Ace" Kumari , Colin Doyle
I-D last updated 2020-02-18
Completed reviews Genart Last Call review of -02 by Francis Dupont (diff)
Opsdir Last Call review of -03 by Mehmet Ersue (diff)
Tsvart Last Call review of -08 by Mirja Kühlewind (diff)
Iotdir Telechat review of -10 by Nancy Cam-Winget (diff)
Comments 
While the draft is fairly straight-forward, it would benefit from some more eyes.  In particular, any other security issues other than those called out by the authors as well as risks and implementation pitfalls operators should be aware of would be valuable.
Assignment Reviewer Mehmet Ersue
State Completed
Request Last Call review on draft-ietf-opsawg-sdi by Ops Directorate Assigned
Posted at https://mailarchive.ietf.org/arch/msg/ops-dir/U1IoT-SMhrCnBnhULbcG2cVurBg
Reviewed revision 03 (document currently at 13)
Result Has nits
Completed 2020-02-18
review-ietf-opsawg-sdi-03-opsdir-lc-ersue-2020-02-18-00
I reviewed the document "Secure Device Install (draft-ietf-opsawg-sdi-03) as
part of the Operational directorate's ongoing effort to review all IETF
documents being processed by the IESG. These comments were written primarily
for the benefit of the operational area directors.  Document editors and WG
chairs should treat these comments just like any other last call comments.

Intended status: Informational
Current IESG state: I-D Exists
IANA State: N/A

Summary:
The document extends existing auto-install / Zero-Touch Provisioning mechanisms
to make the process more secure.

There are no relevant draft nits in the document.

Though there are a few typos, etc.
s/There are also a/There is also a/
s/an auto-install techniques/an auto-install technique/
s/etc;/etc.;/
5x s/e.g/e.g./
s/operations is/operations are/

As far as I can see the document has been repeatedly improved and is in good
shape. I don't see any big issues related to management preventing from
publication.

Cheers,
Mehmet