Subject: [COSE] draft-birkholz-sacm-coswid-01

From: Jim Schaad <[email-masked]>
Date: Fri, 19 Aug 2016 21:02:48 -0700

This represents a fast read through and not a hard review.

Section 1 - bullet point 2 - I think that the reference to X.1520 is in the
wrong place

Section 2 - the change of the naming scheme seems to be gratuitous.  You
need to justify it  if you are going to keep it.

Section 3 - why are you wrapping a hash in a bstr rather than leaving it as
an array?

Section 4 - you have the protected and unprotected header restrictions
backwards

Jim