draft-ietf-webdav-acl-12

[Steve Bellovin <smb@research.att.com>]

Alex, is there a short list of what's been changed since the
last time we saw this?  A quick wdiff shows that none of my
concerns have been satisifed, but it would take a very careful
read-through to be sure.  In fact, it's often been made worse;
see the new text in 19.2, which says "here's the privileges you
need, but if you don't have them you may get access anyway, and
if you do have them you may not get access despite what we say".
I objected to 7.4, which badly described the access control for
DELETE; the response was to delete the section entirely, and thus
say nothing -- but DELETE still exists.  9.4 is almost unchanged.
5.2 still speaks of dialog boxes.  Etc.

I see no reason to change my vote from "abstain".  For the benefit
of those who are new to the IESG, I'll repeat my comment from then:

	I'm listing myself as "abstain" rather than "discuss",
	because I have no suggested changes short of "go back and
	start over", and I don't regard that as likely. But I'm
	not saying "no-ob" because I do think this document is
	dangerous, especially Section 6.