Hello,

I have reviewed this document as part of the security directorate’s ongoing
effort to review all IETF documents being processed by the IESG. These
comments were written primarily for the benefit of the security area
directors. Document editors and WG chairs should treat these comments just
like any other last call comments.

Summary: Ready

I just have a minor comment regarding Section 6 "Security Considerations" and 7 "Privacy Considerations".
The current draft briefly mentions RFC 7808 whereas this RFC has very detailed security and privacy sections and is a MUST READ.
I suggest the authors refer to RFC 7808 in both sections for further security or privacy information in a convincing manner.

Regards,   Vincent