[Last-Call] Secdir last call review of draft-ietf-cbor-7049bis-14

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Reviewer: Yaron Sheffer
Review result: Has Nits

This is an editorial, fully compatible update of RFC 7049 (the CBOR encoding).

The Security Considerations have been significantly expanded, and they make
sense to me. However, while the prose is all sensible, it doesn't seem like the
best practical guidance for implementers. I would have appreciated a bullet
list of potential implementation pitfalls, as well as a bullet list of decoder
validation capabilities, such as are alluded to by the last sentence of the
section. Upon a quick read, it is not even clear to me which parts of Sec. 5
are required/expected in a validating-mode decoder.


-- 
last-call mailing list
last-call@xxxxxxxx
https://www.ietf.org/mailman/listinfo/last-call



[Index of Archives]     [IETF Annoucements]     [IETF]     [IP Storage]     [Yosemite News]     [Linux SCTP]     [Linux Newbies]     [Mhonarc]     [Fedora Users]

  Powered by Linux