kerberos-referrals-13 - text clarification needed

Hi,
The beginning of the section 4.1 reads: "Two realms participate in any cross-realm relationship: an issuing realm issues a cross-realm ticket and a consuming realm uses this ticket.  There is a degree of trust of the issuing realm by the consuming realm implicit in this relationship." Would it be possible to clarify the last sentence?

Then, later in this section "Creating a cross-realm relationship implies relatively little inherent trust in the issuing realm.  Significant trust only applies as principals dependent on that issuing realm are given access to resources.  However, two deployment constraints may imply significantly greater trust is implied by the initial cross-realm relationship." - the last sentence needs clearer wording, I think.

In section 3 "The client should expect, when sending names with the "canonicalize" KDC option, that names in the KDC's reply MAY be different than the name in the request." I suggest to have "MAY be different than the names in the request".

Finally, few minor typos:
In section 6: "it is common for KDCs to maintain ta set of aliases "it is common for KDCs to maintain a set of aliases".
Then, later in section 6 "In addition te permitting" should be "In addition to permitting".
In section 9 "When a client follows such a referral, it including the realm of the referred-to realm in the generated request." should be "When a client follows such a referral, it includes the realm of the referred-to realm in the generated request. Also, see the string "The The" in section 11.

Thanks,
Zhanna

_______________________________________________
ietf-krb-wg mailing list
[email protected]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg