Document: draft-turner-application-pkcs10-media-type-04.txt Reviewer: Miguel Garcia Review Date: 30-April-2010 IETF LC End Date: 10-May-2010 Summary: The document is almost ready for publication as an Informational RFC (see comments below). Minor issues: I would like to discuss with the author on sentence that is a bit controversial to me. On Section 2, the sentence reads: The application/pkcs10 media type MUST be used to transfer a PKCS #10 certification request. Allow me turn the sentence into an equivalent, but easier to understand, active voice: "A PKCS #10 certification request MUST use the application/pkcs10 media type." And here is my problem. This Internet-Draft is about the application/pkcs10 media type, so you cannot write a requirement for a PKCS #10 certification request, which is specified in RFC 2986, to mandate the usage of the application/pcks10 media type. In other words, I believe the sentence is technically correct, but this is not the document where it should be written. So, did the author write this sentence intentionally or has further background for its existence? Nits/editorial comments: - In Section 3 (IANA), please identify the registry where IANA has to operate, which I believe is the "Application Media Types registry". - Question. In Section 3.1 (registration of the application/pkcs10 media type), there is a reference in "Published specifications" to RFC 2986. If I were reading the IANA registry and open RFC 2986, I wouldn't find any reference to this media type. Therefore, I conclude that the Published Specifications should refer only to this Internet-Draft and not to RFC 2986. - Expand "DER" at first usage (second paragraph in Section 2.1).