Address comments from reviews.

suit-wg / information-model

1 stars 1 forks source link

Closed bremoran closed 4 years ago

bremoran commented 4 years ago

Change from MANDATORY to REQUIRED in line with RFC2119.
Introduce a white-labelling example for Vendor ID + Class ID
Change to Manifest Element: Signature; allowing a manifest sent via an authenticated channel opens a secondary threat. Disallow this use-case explicitly, with justification.
Define size limitation for integrated payloads.

oyvindronningstad commented 4 years ago

Does it make sense to mention that any data obtained by decoding the manifest must also be protected from tampering?

bremoran commented 4 years ago

@oyvindronningstad I think that makes perfect sense.