IESG commet on draft-ietf-trade-iotp-v1.0-papi-05

Eastlake III Donald-LDE008 <[email protected]> Tue, 16 Mar 2004 00:06:53 -0500

Newsgroups	gmane.ietf.trade
Message-ID	<62173B970AE0A044AED8723C3BCF23810408B323@ma19exm01.e6.bcs.mot.com>

The IESG has provided the following comment on
	draft-ietf-trade-iotp-v1.0-papi-05

"The use of MerchantData makes me nervous.  The level of abstraction makes
it difficult to tell, but I think that MerchantData can contain plaintext
cryptographic keys, which would be very poor design."

We need to respond to this comment.

Thanks,
Donald
===========================================================
 Donald E. Eastlake III       [email protected]
 Motorola Laboratories               1-508-786-7554 (work)
 111 Locke Drive                     1-508-634-2066 (home)
 Marlboro, MA 01752 USA