Subject: [Suit] draft-ietf-suit-manifest-12

From: Russ Housley <[email-masked]>
Date: Wed, 3 Mar 2021 16:50:27 -0500

I did a quick review of draft-ietf-suit-manifest-12.  These are the things I noticed.

TECHNICAL SUGGESTIONS

I think that Section 8.7.5.1 should point to draft-ietf-cbor-tags-oid and it should use TBD112 (tag 111).

We talked about mandatory to support signature verification algorithms, but there is not a section about it.

EDITORIAL

In several big tables, using "Section" instead of "Reference" as the column heading would make the text fit on one line.

In Section 8.7.5.2, two numbered lists are formatted in a hard to read manner.

In Section 13, please fix "Krzysztof Chru&#347;ci&#324;ski"

Russ

> On Feb 22, 2021, at 4:39 PM, [email-masked] wrote:
> 
> 
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the Software Updates for Internet of Things WG of the IETF.
> 
>        Title           : A Concise Binary Object Representation (CBOR)-based Serialization Format for the Software Updates for Internet of Things (SUIT) Manifest
>        Authors         : Brendan Moran
>                          Hannes Tschofenig
>                          Henk Birkholz
>                          Koen Zandberg
> 	Filename        : draft-ietf-suit-manifest-12.txt
> 	Pages           : 111
> 	Date            : 2021-02-22
> 
> Abstract:
>   This specification describes the format of a manifest.  A manifest is
>   a bundle of metadata about code/data obtained by a recipient (chiefly
>   the firmware for an IoT device), where to find the that code/data,
>   the devices to which it applies, and cryptographic information
>   protecting the manifest.  Software updates and Trusted Invocation
>   both tend to use sequences of common operations, so the manifest
>   encodes those sequences of operations, rather than declaring the
>   metadata.
> 
> 
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-suit-manifest/
> 
> There are also htmlized versions available at:
> https://tools.ietf.org/html/draft-ietf-suit-manifest-12
> https://datatracker.ietf.org/doc/html/draft-ietf-suit-manifest-12
> 
> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=draft-ietf-suit-manifest-12
> 
> 
> Please note that it may take a couple of minutes from the time of submission
> until the htmlized version and diff are available at tools.ietf.org.
> 
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/