draft-chiba-radius-dynamic-authorization

[Russ Housley <housley@vigilsec.com>]

I have a few comments on draft-chiba-radius-dynamic-authorization.

1.  Section 2.3 includes the following sentence: "The Identifier field MUST 
be changed whenever the content of the Attributes field changes, and 
whenever a valid reply has been received for a previous request."  I think 
that "and" should be "or."

2.  In section 5.3, in the one place, please change "IPSEC" to "IPsec".

3.  In section 5.3, please spell out the first use of "CA".  It needs to be 
"Certification Authority."

4.  In section 5.3, please use "trust anchor" instead of "trusted 
root."  Also, RFC 3280 should be referenced as a definition for trust 
anchor and certification path processing.

Russ