Skip to main content

IETF Last Call Review of draft-ietf-tvr-requirements-08
review-ietf-tvr-requirements-08-secdir-lc-turner-2026-04-20-00

Request Review of draft-ietf-tvr-requirements
Requested revision No specific revision (document currently at 09)
Type IETF Last Call Review
Team Security Area Directorate (secdir)
Deadline 2026-02-11
Requested 2026-01-28
Authors Daniel King , Luis M. Contreras , Brian Sipos , Li Zhang
I-D last updated 2026-06-12 (Latest revision 2026-06-12)
Completed reviews Opsdir IETF Last Call review of -07 by Bo Wu (diff)
Genart IETF Last Call review of -07 by Linda Dunbar (diff)
Tsvart IETF Last Call review of -07 by Mirja Kühlewind (diff)
Secdir IETF Last Call review of -08 by Sean Turner (diff)
Opsdir IETF Last Call review of -08 by Bo Wu (diff)
Intdir Telechat review of -08 by Darren Dukes (diff)
Assignment Reviewer Sean Turner
State Completed
Request IETF Last Call review on draft-ietf-tvr-requirements by Security Area Directorate Assigned
Posted at https://mailarchive.ietf.org/arch/msg/secdir/YBZYxLbU2mEr4iqcxJ5GqBZIVIA
Reviewed revision 08 (document currently at 09)
Result Ready
Completed 2026-04-20
review-ietf-tvr-requirements-08-secdir-lc-turner-2026-04-20-00
Apologies for being tardy.

I reviewed the other Directorate comments and the SecADs comments. I do not
really have anything of substance to add. But, I will offer my normal warning
when publishing a requirements draft before you're done with the protocol - you
might want to hold off on publishing this draft until the actual protocol gets
done just in case you find out you can't meet you're requirements. Nothing like
doing a bis to remove a requirement.

Nits:

0) s2.1.2: Contains this: "There is also the possibility of an intermediate
situation ..." But, later (and earlier) I think the term “intermediate
schedule” is used. Rephrasing the sentence in s2.1.2 to refer to “intermediate
schedule”, I think, might help if people are searching on that term.

1) s6.2: Should "ability" be "availability" in the following: "The schedule
ability could enable attackers to launch highly targeted attacks ..."