Subject: IESG commet on draft-ietf-trade-iotp-v1.0-papi-05

From: Eastlake III Donald-LDE008 <[email-masked]>
Date: Tue, 16 Mar 2004 00:06:53 -0500

The IESG has provided the following comment on
	draft-ietf-trade-iotp-v1.0-papi-05

"The use of MerchantData makes me nervous.  The level of abstraction makes
it difficult to tell, but I think that MerchantData can contain plaintext
cryptographic keys, which would be very poor design."

We need to respond to this comment.

Thanks,
Donald
===========================================================
 Donald E. Eastlake III       [email-masked]
 Motorola Laboratories               1-508-786-7554 (work)
 111 Locke Drive                     1-508-634-2066 (home)
 Marlboro, MA 01752 USA