Re: Evaluation: draft-ietf-simple-winfo-package - A Session Initiation Protocol (SIP)Event Template-Package for Watcher Information to Proposed Standard

["Steven M. Bellovin" <smb@research.att.com>]

In message <200212272000.PAA13645@ietf.org>, IESG Secretary writes:
>
>Last Call to expire on: 2002-10-3
>
>	Please return the full line with your position.
>
>                    Yes    No-Objection  Discuss *  Abstain  
>
>
>Steve Bellovin      [   ]     [   ]       [ X ]      [   ]

draft-ietf-simple-presence-09.txt:
	6.3 should say "some other document will define
	a filter language".  The current language is too vague.  (This
	can be fixed with an RFC editor's note.)

	6.6.1 -- which authentication methods are mandatory to
	implement?  Ditto 9.2 and 9.4.  Also see 6.2 in 
	draft-ietf-simple-winfo-package-04.txt

	It appears to be possible to probe the name space to see what
	user names are valid.  Is this a concern?



		--Steve Bellovin, http://www.research.att.com/~smb (me)
		http://www.wilyhacker.com (2nd edition of "Firewalls" book)