From a6a0395e92e111cd47daea8f9bafb3d1bef214cf Mon Sep 17 00:00:00 2001 From: Randy Bush Date: Thu, 18 Jan 2024 11:46:00 -0800 Subject: [PATCH] rob wilton's AD review comments addrssed --- draft-ietf-opsawg-9092-update.xml | 17 +++++++---------- 1 file changed, 7 insertions(+), 10 deletions(-) diff --git a/draft-ietf-opsawg-9092-update.xml b/draft-ietf-opsawg-9092-update.xml index bd4c3d7..04e67e6 100644 --- a/draft-ietf-opsawg-9092-update.xml +++ b/draft-ietf-opsawg-9092-update.xml @@ -290,10 +290,12 @@ - Any particular inetnum: object SHOULD have, at - most, one geofeed reference, whether a remarks: or a proper - geofeed: attribute when it is implemented. If there is more - than one, the geofeed: attribute SHOULD be used. + Any particular inetnum: object SHOULD have, at most, one geofeed + reference, whether a remarks: or a proper geofeed: attribute + when it is implemented. A geofeed: attribute is preferred, of + course, if the RIR supports it. If there is more than one type + of attribute in the intetnum: object, the geofeed: attribute + SHOULD be used. For inetnum:s covering the same address range, or an inetnum: @@ -357,11 +359,6 @@ via brute-force search through the IP space. - - When an inetnum: with a geofeed file reference is identified, - the file MUST be downloaded using HTTPS. - - When reading data from the geofeed file, one MUST ignore data outside the referring inetnum: object's address range. This is @@ -541,7 +538,7 @@
  1. - Obtain the signer's certificate from the CMS SignedData + Obtaining the signer's certificate from the CMS SignedData CertificateSet . The certificate SubjectKeyIdentifier extension MUST match the SubjectKeyIdentifier in the CMS SignerInfo