Subject: [secdir] Secdir review of draft-bundesbank-eurosystem-namespace-02

From: Dorothy Gellert <[email-masked]>
Date: Fri, 6 Dec 2013 23:16:50 +0000

I have reviewed this document as part of the security directorate's
ongoing effort to review all IETF documents being processed by the
IESG.  These comments were written primarily for the benefit of the
security area directors.  Document editors and WG chairs should treat
these comments just like any other last call comments.

This draft registers a new URN Namespace, eurosystem, with IANA.  The draft is well written and straight forward and includes a security consideration section referencing that in RFC 3986, 2141 and 3406.  Additionally, its noted that non authorized resolvers will result in errors.  This namespace will be owned and maintained by Eurosystem, and the URNs will be used in ISO20022 message exchanges over IP networks. Perhaps it would be more comprehensive if any security concerns, threats or attacks from this protocol exchange also be referenced within the security consideration section of this draft.

I believe this draft is Ready.

Best Regards,
Dorothy Gellert